Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-33900

Опубликовано: 20 мая 2024
Источник: debian

Описание

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

Примечания

  • Disputed KeePassXC issue

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

CVSS3: 6.5
nvd
больше 2 лет назад

KeePassXC 2.7.7 allows an attacker (who has the privileges of the victim) to recover cleartext credentials via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs.

CVSS3: 6.5
github
больше 2 лет назад

KeePassXC 2.7.7 allows attackers to recover cleartext credentials.

CVSS3: 6.5
altlinux
больше 2 лет назад

ALT-PU-2024-18233: package `keepassxc` update to version 2.7.8-alt1